[quote user="Bill@VT"]
Thanks. That was very helpful, but I am not sure what the issue is. It gives a SSL error as given below:
00:05:52.857 22: Error -32 activating SSL session (locus 6014, type 4, 'Invalid length 17609 for handshake packet type 13\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC')
[/quote]
This error is triggered by servers asking for client certificates in the SSL handshake after an update to the root-CA file used. It is either the raw size of the list or the contents. Didn't check that. Eg. on Redhat/CentOS the root-CA bundle /etc/pki/tls/certs/ca-bundle.crt grew from ~570kB to 750kB. Since Pegasus complains about "length" I think it's the size. Deactivating client cert verification on the server side can help to work around the "limited" SSL library from Pegasus (again). There is nothing you can do to fix this on your side other then disabling SSL at all.
Greetings, MASHtm
[quote user="Bill@VT"]<p>Thanks. That was very helpful, but I am not sure what the issue is. It gives a SSL error as given below:</p><p>&nbsp;00:05:52.857 22: Error -32 activating SSL session (locus 6014, type 4, 'Invalid length 17609 for handshake packet type 13\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC\FFFFFFCC')
</p><p>&nbsp;
</p><p>[/quote]</p><p>This error is triggered by servers asking for client certificates in the SSL handshake after an update to the root-CA file used. It is either the raw size of the list or the contents. Didn't check that. Eg. on Redhat/CentOS&nbsp; the root-CA bundle /etc/pki/tls/certs/ca-bundle.crt grew from ~570kB to 750kB. Since Pegasus complains about "length" I think it's the size. Deactivating client cert verification on the server side can help to work around the "limited" SSL library from Pegasus (again). There is nothing you can do to fix this on your side other then disabling SSL at all.</p><p>&nbsp;Greetings, MASHtm
</p>